Update Api Key

Update an API key’s metadata, budget, and access control allowlists.

allowed_face_ids accepts face USERNAMES (not UUIDs).

Fields:

• name: rename the key
• budget_usd: set a new spend cap (null = no change; use clear_budget=true to remove)
• reset_spent: set spent_usd back to 0
• allowed_face_ids: replace face allowlist using face usernames (null = no change; use clear_iam_allowlist=true to remove)
• allowed_llm_models: replace LLM allowlist (null = no change; use clear_llm_allowlist=true to remove)
• clear_budget: remove spend cap (set budget_usd to null)
• clear_iam_allowlist: remove face restriction (key accesses all owned faces)
• clear_llm_allowlist: remove LLM restriction (key may use all LLM models)

Requires JWT authentication (not API key auth).